Media session API

Service endpoint. Unauthorized requests are ignored.